Entanglement's Benefit Survives an Entanglement-Breaking Channel 
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Entanglement is essential to many quantum information applications, but it is easily destroyed 
by quantum decoherence arising from interaction with the environment. We report the first exper- 
imental demonstration of an entanglement-based protocol that is resilient to loss and noise which 
destroy entanglement. Specifically, despite channel noise 8.3 dB beyond the threshold for entangle- 
ment breaking, eavesdropping-immune communication is achieved between Alice and Bob when an 
entangled source is used, but no such immunity is obtainable when their source is classical. The 
results prove that entanglement can be utilized beneficially in lossy and noisy situations, i.e., in 
practical scenarios. 
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Entanglement is essential to many quantum informa- 
tion applications [H-Hlj. but it is easily destroyed. Quan- 
tum illumination (QI) [l2-15| is a radically different 
entanglement-based paradigm for bosonic channels: it 
thrives on entanglement-breaking loss and noise. For 
a given transmitter power, an initially entangled state's 
nonclassical correlation produces a classical state at the 
output of an entanglement-breaking channel whose corre- 
lation can greatly exceed what any classical input of the 
same power can yield through that channel. This sug- 
gests that bosonic entanglement can be utilized advanta- 
geously in practical situations where it does not survive. 

First proposed to increase the signal-to-noise ratio 
(SNR) for detecting a weakly-reflecting target in the pres- 
ence of strong background noise [l2-14|, quantum illu- 
mination was later shown, theoretically, to enable high 
data-rate classical communication that is immune to pas- 
sive eavesdropping 15]. In the latter application, Al- 



ice and Bob use an entangled-state input for their data 
transfer. Eve, however, has no access to Alice's retained 
portion of the entangled state, so her eavesdropping per- 
formance is that of a classical-state input. The result- 
ing disparity between Alice and Eve's performance — in 
bit-error rate (BER) and information received per trans- 
mitted bit — guarantees Alice and Bob's communication 
security. In this Letter we report the first experimental 
demonstration of QTs passive-eavesdropping immunity. 
Aside from its relevance to secure communication, our 
experiment represents the first time that bosonic entan- 
glement has yielded a strong performance benefit over an 
entanglement-breaking channel. Thus it implies that the 
use of entanglement should not be dismissed for environ- 
ments in which it will be destroyed. Moreover, unlike the 
recent experiment flt]| reporting the target-detection ad- 
vantage of photon-pair correlations, our eavesdropping- 
immune QI protocol requires an initial state that is en- 
tangled. Also, our communication protocol uses o nly one 
pulse to decode a bit, whereas target detection in [16| de- 
pends on the accumulation of enough data to accurately 



estimate a covariance. 

Our QI communication experiment is shown schemati- 
cally in Fig.JTJ Alice prepares maximally-entangled signal 
and idler beams using a spontaneous parametric down- 
converter (SPDC), sending the signal to Bob and retain- 
ing the idler. Bob encodes his message bits at 500kbit/s 
by applying (message bit = 0) or 7rrad (message bit 
= 1) phase shifts on the signal he receives from Alice. 
Bob then intentionally breaks the signal-idler entangle- 
ment by passing his modulated signal light through an 
erbium-doped fiber amplifier (EDFA), whose amplified 
spontaneous emission (ASE) noise masks his bit stream 
from Eve. Eve must rely on the joint classical-state light 
she has tapped from the Alice-to-Bob and Bob-to-Alicc 
channels, while Alice combines her noisy returned light 
with her retained idler in a joint measurement to decode 
Bob's bit stream. Consequently, QI makes Alice's cross- 
correlation signature between her retained and returned 
light beams far stronger than Eve's corresponding sig- 
nature for her two tapped beams, even though Alice and 
Eve's receivers only have classical states at their disposal. 

In Fig. [I] Alice's SPDC uses a 20-mm type-0 phase- 
matched MgO-doped periodically-poled lithium nio- 
bate (MgO:PPLN) crystal that is continuous-wave (cw) 
pumped at 780 nm, producing signal and idler outputs at 
1550 nm and 1570 nm. A coarse wavelength division mul- 
tiplexer (CWDM) separates the signal and idler and ban- 
dlimits them to 16 nm (W « 2THz). The T = 2 fis bit 
duration at 500kbit/s then contains M = TW « 4 x 10 6 
signal-idler mode pairs per information bit. At ^135 mW 
pump power, the SPDC generates a source brightness of 
Ns = 0.001 signal (and idler) photons per mode on aver- 
age. Having Ns <C 1 and MN$ 1 are essential for QI. 
The former ensures that Alice gets a much stronger cor- 
relation signature than Eve does, and the latter guaran- 
tees that Alice receives sufficient photons/bit to achieve 
a low error probability. We typically operate at pump 
levels yielding MN$ values of hundreds to thousands. 
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FIG. 1: (color online). Experiment setup. SPDC: spontaneous parametric downconverter; DM: dichroic mirror; C: collimator; 
CWDM: coarse wavelength-division multiplexer; BS: beam splitter; Attn: attenuator; EDFA: erbium-doped fiber amplifier; 
DL: delay line; PC: polarization controller; PM: phase modulator; AAG: adjustable air gap; Pol: polarizer; DCF: dispersion- 
compensating fiber; DSF: dispersion-shifted fiber; TEC: thermoelectric cooler; OPA: optical parametric amplifier; D: detector. 



Alice retains the idler in a spool of dispersion-shifted 
fiber, whose propagation delay matches the Alice-to-Bob- 
to- Alice delay seen by the signal beam. She sends her 
signal beam to Bob through a single-mode fiber (SMF) 
into which Eve has placed a 50-50 beam splitter. Bob 
applies binary phase-shift keying (BPSK) modulation to 
the signal light he has received using a phase modulator 
driven by a pseudorandom bit sequence from a bit-error 
rate tester (BERT). The modulated light is fed to an 
EDFA set to a measured gain Gb ~ 1.34 x 10 4 whose 
ASE noise has per-mode average photon number Nb ~ 
1.46 x 10 4 . A CWDM filter is used to bandlimit the ASE 
to the 16 nm occupied by the signal and to attenuate the 
ASE within the idler spectral band by ~30dB. Complete 
suppression of the ASE noise outside of the signal band 
is achieved with a second CWDM in Alice's receiver (and 
with additional attenuation in Eve's receiver). 

Our QI protocol is intrinsically interferometric, so Bob 
uses a free-space delay line with ^80% efficiency to 
fine tune the timing between the signal and the idler 
paths. Dispersion in the SMFs connecting Alice and Bob 
broadens the SPDC's ~0.22ps biphoton wave-function to 
^27 ps. Thus Alice injects the light returned from Bob 
into ~10m of dispersion-compensating fiber before com- 
bining it with her retained idler through a CWDM. The 
signal path sustains a measured channel loss of ~16.4 dB 
that includes SMF coupling loss, fiber-optic component 
insertion loss, and Eve's 50% (10%) tap placed before 
(after) Bob's apparatus. (Eve's 50% tap of the Alice- 
to-Bob channel minimizes her BER when her receiver is 
ASE limited. However, her removing more than 10% of 
light from the Bob-to- Alice channel does not improve her 
BER, because her receiver is ASE limited even with the 
10% tap.) Alice's idler suffers ~4.1 dB channel loss from 
SMF coupling and component insertion loss. 

Alice decodes Bob's message bits by applying the re- 
turned and retained light to the signal and idler ports, 



respectively, of a low-gain optical parametric amplifier 
(OPA), and then doing direct detection on the OPA's 
idler-port output followed by matched filtering of the out- 
put current and threshold-decision logic. In the experi- 
ment, the returned and retained light are free-space cou- 
pled with the cw pump beam through a dichroic mirror 
to an OPA based on a 20-mm MgO:PPLN crystal. The 
OPA converts the cross correlation between the phase- 
modulated signal and the retained idler into amplitude 
modulation in the output idler that can be sensed with 
direct detection. After the OPA, a dichroic mirror is 
used to remove the pump and the OPA's signal and idler 
outputs are coupled into an SMF and separated by a 
CWDM filter. The separated idler is coupled into free 
space and detected by an avalanche photodiode (APD) 
setup that is 45% efficient, when coupling and CWDM 
loss are combined with detector quantum efficiency. 

The APD's output current passes through a low- noise 
current amplifier, whose output is sent to an active high- 
pass filter, to reject dc, followed by a low-pass filter. The 
sampled output from the second filter is supplied to a 
field programmable gate array (FPGA) that yields two 
outputs. The FPGA program to produce the first out- 
put approximates the matched filter for a single bit, and 
it is subsequently dc shifted and amplified to transistor- 
transistor logic levels for BER measurements. The sec- 
ond output provides a feedback signal to a lock-in am- 
plifier that is part of a servo-control system (SCS) which 
stabilizes the relative phases between the OPA pump, Al- 
ice's retained idler, and the modulated light she receives 
from Bob. The SCS also includes a slow thermal-control 
loop for Alice's fiber spool. Typical incident power at 
the APD is approximately 10 nW. It is dominated by the 
signal-band ASE noise converted to the idler band by 
the OPA. The OPA gain G A is kept low, G X -1<1, 
to prevent the ASE noise from overwhelming the am- 
plitude modulation in the OPA's idler output. We im- 
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plement Eve to demonstrate Alice's entangled-input QI 
performance advantage over what Eve achieves with her 
classical-state input. Eve decodes Bob's message by com- 
bining the light she has tapped from Alice and Bob's 
transmissions on an asymmetric beam-splitter, and then 
doing direct detection followed by matched filtering of 
the output current and threshold-decision logic. 

Both Alice and Eve's receivers are sub-optimal, in com- 
parison with minimum error-probability quantum mea- 
surements, but both represent their best receivers for 
which explicit realizations are known. With these re- 
ceivers Alice and Eve's BERs are given by (see Supple- 
mental Material for details) 



setup employed by Alice. 
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Here: Q is the tail integral of the standard Gaus- 
sian probability density; (a\/Ns(Ns + 1) (Ce-^s) is the 
modulation-depth signature of Bob's message bit seen by 
Alice (Eve), where (^a (Ce) i s a transmission efficiency; 
and ) are Alice's (Eve's) per-mode noise stan- 

dard deviations for bit values and 1. The transmis- 
sion efficiencies include (see Supplemental Material) the 
EDFA gain, channel loss, and an effective modulation- 
depth factor due to residual dispersion and less than op- 
timal mode-pair coupling into an SMF. 

The points in Fig. [2] are Alice and Eve's measured 
BERs. Each point is the average of 10 measurements — 
1 Msample per measurement, which typically takes only a 
few seconds — with error bars indicating ±1 standard de- 
viation. At Alice's maximum SPDC output, Eve's mea- 
sured modulation depth is insufficient to permit BER^ 
measurements that would reveal their Ns dependence. 
Thus to demonstrate that scaling, we replace Alice's 
SPDC source with the attenuated, CWDM-filtered ASE 
from an EDFA, as shown in Fig. [TJ whose flat-top spec- 
trum thermal state mimics SPDC signal light, but easily 
produces tens of nW of power for Eve. Eve stores the 
light split from the Alice-to-Bob channel using a fiber 
spool, which matches the total fiber length inside Bob's 
setup, and employs a free-space delay line to fine tune 
the timing between the two paths. The free-space delay 
line's coupling is adjusted to optimize Eve's receiver and 
further suppress the out-of-band ASE noise. Light she 
has split from the Alicc-to-Bob and Bob-to- Alice chan- 
nels are interfered on a 99-1 beam splitter, with 99% of 
the power coming from the light taken from the Alice- 
to-Bob channel, and 1% of the power coming from the 
light taken from the Bob-to- Alice channel. Eve uses a 
feedback arrangement similar to Alice's to stabilize her 
interferometer. Eve obtains her BER values by measur- 
ing the combined light using the same APD detection 
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FIG. 2: BERa and BERg versus source brightness Ns for 
500kbit/s communication. Inset: 25 bits of OPA-receiver 
detector output (blue) and Bob's corresponding modulation 
waveform (red). See text for more information. 

The dashed and solid blue curves in Fig. [5] are the- 
ory for BER^ when Alice uses a maximally-entangled 
SPDC and an OPA receiver with gain Ga — 1 = 1.86 x 
1CP 5 . The dashed blue curve shows Alice's performance 
when she has an ideal OPA receiver, viz., no loss of 
modulation depth due to residual dispersion or sub- 
optimal mode-pair coupling, unity detection efficiency, 
unity APD noise figure, no OPA pump-power fluctu- 
ations, and no electronics noise; the solid blue curve 
employs the experimentally-determined values for these 
receiver nonidcalities. The dashed red curve — virtually 
identical to the dashed green curve — assumes that Alice 
uses a classical-state source with maximally-correlated 
signal and idler and an ideal OPA receiver. The gap be- 
tween the dashed red and solid blue curves shows that 
Alice's performance using an SPDC source and imper- 
fect OPA reception exceeds what can be achieved with 
that classical-state source and ideal OPA reception. 

The dashed and solid green curves in Fig. [2] are the- 
ory for BER.£ when Alice uses a maximally-entangled 
SPDC source or a maximally-correlated classical source 
and Eve employs an interference receiver. The dashed 
curve assumes Eve's receiver is ideal; the solid green 
curve employs the experimentally-determined values for 
her receiver's nonidcalities. The near-identical nature of 
the dashed red and dashed green curves is a coincidental 
consequence of our experiment's parameter values. 

The blue circles in Fig. [5] are measured BER^ values 
under the operating conditions used to obtain the solid 
blue curve; they show our experimental results to be in 
excellent agreement with theory with no free parameters 
being adjusted. The filled blue diamond in Fig. [2] is Al- 
ice's measured BER at N s = 7.81 x 10~ 4 when her OPA 
gain was increased to Ga — 1 = 2.48 x 10 -5 , and the filled 



4 



green triangle above it is the measured BERg (Alice's 
SPDC is used for this measurement). These two points 
represent our secure-communication operating point at 
which BER A = 1.78 xlCT 6 and BER £ rj 0.5. The inset 
provides a visual indication of Alice's low-BER perfor- 
mance by overlaying 25 bits of her receiver output (blue), 
with the dc level removed, on Bob's corresponding modu- 
lation waveform (red), which is scaled to match the data's 
peak-to-peak range. The joint state of Alice's returned 
and retained beams, conditioned on Bob's BPSK value, is 
zero-mean and Gaussian. Hence it becomes classical (see 
Supplemental Material) when Nb > N B hlcsh = 2.14xl0 3 , 
so our measured Nb = 1-46 x 10 4 is 8.3 dB above the 
threshold for classicality. 

The disparity between Alice and Eve's BERs at the 
secure-communication operating point, the Ns gap be- 
tween the dashed red and solid blue theory curves at 
the same BER values, and N B 's exceeding N B hrcsh by 
8.3 dB confirm the essential feature of quantum illumina- 
tion that is exploited here in a communication setting: a 
large performance gap between an entangled-state input 
and a classical-state input in a lossy and noisy channel. 

The open green triangles in Fig. [3] were obtained us- 
ing attenuated ASE from an EDFA source in lieu of light 
from a downconverter. They show our measurements to 
be in excellent agreement with theory with no free pa- 
rameters being adjusted. The Ns gap between the blue 
circles and the green triangles in Fig. [2] at the same BER 
values quantifies Alice and Bob's entanglement-derived 
communication advantage when Alice and Eve both use 
realistic receivers. 

At this point it is instructive to consider what would 
happen had Alice used a cw laser, instead of an SPDC 
source, and did homodyne detection on the returned light 
from Bob. That receiver is ASE limited — and essentially 
quantum optimal — with an error-exponent that is 3 dB 
inferior to that of an ideal OPA receiver for the same 
transmitted power, so it might seem to provide a much 
easier route to passive eavesdropping immunity. Such, 
however, is not the case: when Eve taps the Alice-to- 
Bob and Bob-to- Alice links and uses her own homodyne 
receiver, it too is ASE limited and its BER is the same as 
Alice's. So Alice's initial broadband signal-idler entangle- 
ment is absolutely essential to her obtaining immunity to 
Eve's passive eavesdropping, because Eve can then only 
employ the broadband thermal light she taps from Alice 
and its modulated version that she captures from Bob. 

Our measurements show Alice enjoying five orders-of- 
magnitude error-probability advantage over Eve — when 
both use realistic receivers — at the secure-communication 
operating point. Moreover, if Bob's bit sequence is 
equally-likely and statistically independent then: (1) Al- 
ice receives very close to one bit of information for each 
bit that Bob has transmitted; and (2) Eve receives nearly 
zero information about each of Bob's bits at this oper- 
ating point. However, both Alice and Eve's receivers 



are limited more by their technical noise than the ASE- 
generated noise that sets their ultimate sensitivity: at 
the secure-communication operating point, Alice's ASE- 
generated variance is only 26.7% (25.1%) for Orad mod- 
ulation (it rad modulation) of her total noise variance. 

It is useful to evaluate the QI performance gap in a dif- 
ferent way: Alice's information advantage over Eve. The 
two panels in Fig. [3] display Alice's Shannon informa- 
tion Iab, an upper bound on Eve's Holevo information 
XeB' ano - a lower bound on Alice's information advan- 
tage Aljjj = Iab ~Xeb- (S cc Supplemental Material for 
details.) In the top panel, Alice's Shannon information 
is computed using the error probabilities from the solid 
blue curve in Fig. [3J while the upper bound on Eve's 
Holevo information is the most she could learn about 
an infinitely long sequence of Bob's bits from an opti- 
mum collective quantum measurement on the light she 
extracts from the Alice-to-Bob and Bob-to-Alice chan- 
nels. Here we see that with Alice using her imperfect 
OPA receiver she can get up to 0.8 bits of information 
advantage, per Bob's transmitted bit, over Eve's opti- 
mum collective quantum measurement. 

A more convincing demonstration that quantum illu- 
mination offers Alice a significant information advantage 
is shown in the bottom panel of Fig. [3] Here we have 
changed the beam splitter that Eve uses to tap the Bob- 
to- Alice transmission to have 10% transmissivity instead 
of the 90% value used in our experiment. Under these 
conditions, Eve gets the same amount of Alice's light 
that Bob does and nine times the amount of Bob's light 
that Alice does. Nevertheless, the upper bound on her 
Holevo information is unchanged from what is seen in 
the top panel. This is because her received BPSK mod- 
ulation depth and the standard deviation of the ASE- 
generated noise that dominates the fluctuations in the 
jointly-Gaussian state she receives both increase in pro- 
portion to the fraction of the light she taps. Alice's 
BER, however, is somewhat degraded by reducing the 
amount of light she gets from Bob, because of her re- 
ceiver's technical noise. Consequently, her information 
advantage over Eve's optimum collective quantum mea- 
surement now peaks at 0.66 bits/bit. 

Our experiment demonstrates the Ql-communication 
protocol's immunity to passive eavesdropping that was 
predicted, theoretically, in [l5j. That reference already 
noted that this protocol is vulnerable to active attacks, 
in which Eve injects her own light into Bob's terminal. 
Indeed, Eve could inject her own SPDC signal light into 
Bob, retaining her source's idler light for use with the 
light she taps from the Bob-to-Alice channel. Steps that 
could be taken to ward off active attacks were suggested 
in [l5| , and initial analyses of many of these approaches 
have been performed 17J, but more work is needed on 
defeating active attacks. 

In conclusion, we have demonstrated that the ben- 
efits of bosonic entanglement can be reaped over an 
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FIG. 3: (color online). Alice's Shannon information, an up- 
per bound on Eve's Holevo information, and a lower bound 
on Alice's information advantage, versus Alice's source bright- 
ness Ns- The top panel computes Alice's Shannon informa- 
tion using the error probabilities from the solid blue curve in 
Fig. [5] The bottom panel computes Alice's Shannon informa- 
tion when Eve takes 90% of the Bob-to- Alice light instead of 
the 10% she receives in the top panel. 

entanglement-breaking channel. Our QI protocol exper- 
imentally achieved more than five ordcrs-of-magnitudc 
BER advantage for Alice over a passive eavesdropping 
Eve when both use realistic receivers. Furthermore, 
based on the excellent fit between our data and the- 
ory, we claim that Alice enjoys an information advan- 
tage that can exceed 0.6 bits per Bob's transmitted bit 
over the optimum collective quantum Eve when Eve taps 
50% of the Alice's transmission and 90% of Bob's trans- 
mission. These advantages are consequences of Alice's 
initial broadband signal-idler entanglement, because they 
disappear when Alice's signal-idler phase-sensitive cross 
correlation is classical, or when Alice uses a laser source. 
The meta-lesson of our experiment is as follows: the per- 
formance disparity between a QI entangled-state input 
and a thermal-state input in communication over a lossy, 
noisy bosonic channel suggests that entanglement may 
be utilized to good effect in other entanglement-breaking 
environments. 

The authors thank Eric Daulcr for the loan of the bit- 
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Supplemental Material 



I. THE COMMUNICATION MODEL 

Figure 2] shows a conceptual schematic for our experiment. The {as;} and {a^} are signal and idler annihilation op- 
erators for one of the M independent, identically-distributed, signal-idler mode pairs produced by Alice's spontaneous 
parametric downconverter (SPDC). The annihilation operators df and are associated with the modes Alice and 
Eve measure, respectively, from a single signal-idler mode pair, where the ± superscripts here and elsewhere in the 
figure represent Bob's ±1 (0 or 7rrad) binary phase-shift keying (BPSK) modulation. The transmissivities k/, ka, ki, 
Kb, k' b , K2, k' a , k<i, Ke, and n' d model losses — including detector quantum efficiencies — in Alice, Bob, and Eve's termi- 
nals and the propagation channels that link them, with the annihilation operators {wj, VA,vi,VB,v'B,V2,v' A ,Vd,VE, v'd} 
representing vacuum-state auxiliary modes. Bob's erbium-doped fiber amplifier (EDFA) has gain Gb and Alice's op- 
tical parametric amplifier (OPA) has gain Ga- Eve chooses the transmissivities ke and t\e to minimize her bit error 
rate (BER). Additional details arc as follows. 




Alice 



Bob V b 



FIG. 4: Conceptual model for secure communication based on quantum illumination. SPDC: spontaneous parametric down- 
converter. BPSK: binary phase-shift keying. EDFA: erbium-doped fiber amplifier. D: detector. OPA: optical parametric 
amplifier. 

Propagation and detection loss. Propagation and detection loss are accounted for, in Fig. |H by beam splitters. 
Each of these is modeled by the annihilation-operator relation 



Gout 



+ vT— KV, 



(3) 



in terms of the input &i n , the output a out , and a vacuum-state auxiliary mode v, where < k < 1 is the beam-splitter's 
transmissivity. 



BPSK model. Bob's BPSK modulator is modeled, for each signal mode, by the annihilation-operator relation 
where ± denotes the common bit value applied to all M signal modes. 

EDFA theory. Bob's EDFA is modeled, for each signal mode, by the annihilation-operator relation 



(4) 



VG! 



1 a 



(5) 



in terms of the amplifier's gain Gb and a thermal-state spontaneous-emission mode Sse; the average photon- number 
per mode of amplified spontaneous emission (ASE) at the amplifier's output is Nb = (Gb — 1)((^se^ se ) ■'•)• 



OPA theory. Alice's OPA is modeled, for each returned-retained mode pair, by the annihilation-operator relation 



Ga a/i + \JGa — 1S Ss ;■ 



(6) 
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II. MODE-PAIR PHOTON STATISTICS 



A single signal-idler mode pair {as , d/ } from Alice's continuous- wave spontaneous parametric downconverter is in 
the maximally-entangled, zero-mean, jointly-Gaussian state psi whose density operator is completely characterized 
by the covariance matrix T SI = {[ at at a So a Io ] T [ a So a Io at at ]) given by 



si 



N s 







N s 



^N s (N s + l) N s + 1 
^Ns{N s + l) 



y/N S (N S + l) 




Ns + 1 



(7) 



where Ns is the source brightness (average number of signal-idler photon pairs per mode). This density operator plus 
the input-output operator evolutions associated with the beam splitters, phase modulator, and optical amplifiers shown 
in the quantum illumination conceptual model from Fig. |4] determine Alice and Eve's single-mode photon-counting 



statistics, namely those of the af^af and a B ] a B operators, respectively. Because all of the preceding evolutions are 
linear, with the beam splitter's free inputs being in their vacuum states and the EDFA's free input being in a thermal 
state, it follows that the af and a^ modes are in zero-mean Gaussian states. Hence their photon-counting statistics 
are Bose-Einstein, with variances that satisfy 



*±tft± 



2 

< J A± 



N%(N± + 1), 



(8) 



and 



„2 

a E± 



(9) 



in terms of their average photon numbers N A = 



± _ /A ±tA±\ 



and Ne 



■ _ /A ±tA±\ 



"E Ei 



It is now simple to back-propagate 



along the chain of linear evolutions to obtain explicit results for these average photon numbers. 

For Alice, including the effect of imperfect dispersion compensation and allowing for sub-optimal mode-pair coupling, 
we have that 



N A 



n d {a L 



±t*±' 



KdGAia^a^) + K d (G A - 1) + n d (G A - l)(a s ^a,g a ) 
± 1r\ d K d \/ Ga{G A - l)Re((a 7l a| s )), 



(10) 
(11) 

(12) 



where 



(4iOii) = Ki(a\ o a Ia ) = KiNs, 



(13) 



k'a k 2 k bGb (^s 4 s 4 ) + k a k 2 k b N b 
k'a k 2 k 'bG b KBHiK A (a' So as ) + k' a k 2 k b N b 

K a K2K b GbKbKiKaNs + K A K2K B N Bl 



(14) 

(15) 
(16) 
(17) 



kik' a k 2 k' b (ai a Ss 



y K!K a k 2 k' b G b (d/ a| 4 ) 



= ±J nin' A K 2 K l B G B n B K 1 K, A (a Io a So ) 



±J KlK' A K2K' B G B K B KiK A Ns(Ns + 1), 



(18) 
(19) 
(20) 
(21) 
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d A is her ideal receiver's modulation depth, and 77^ is its modulation-depth efficiency factor. Combining the preceding 
results we obtain, 

N A = KdG A KiN s + K d (G A - 1) + K d (G A - l)n' A K 2 n' B G B K B Kiti A N s + n d {G A - 1)k' a k 2 k' b N b 

± 2r ld X K dA jG A {G A - 1)kiK a k 2 k b GbKbKik a N s {N s + 1), (22) 
from which it follows that 



rfid A = N+-N A = Arj d K d ^J G A (G A - 1) Ki k aK2 k b G bKbKi k a Ns(N s + 1). (23) 

In the Letter, we have used ( A \/Ns(Ns + 1) = il d d A . 

Similar to what we did in the previous paragraph, we have for Eve that 

N± = 4(414 4 > (24) 

= K 'd((VVE a El + \fl-r] E a,E 3 )HVVE a El + s/1-Ve a| 3 ) (25) 

= ^TjEia^aE,) + K f d (l - m)(tiE 3 a% 3 ) + 2^K' d ^/r 1 E{l - Ve) Re((d Ei a E3 }) (26) 
= «d»7is(l - K 1 )n A (al o a Sa ) + n' d {l - T) E )k e (1 - ^2)^(0^0^) 

+ ^d K 'd\J Ve(1 - Ve)(1 - ki)k a k e (1 - H2)n' B Rc((a^ a| 5 )), (27) 



where 



= G b k b k\k a Ns + N B , (28) 



(4o«S 5 ) = ±\IG b k b k iKa N 2 s , (29) 

is her ideal receiver's modulation depth, and rjf is its modulation-depth efficiency factor. Combining the preceding 
results we get 

n e = K 'dVE(l - ki)k a N s + n' d (l - i] E )k e (1 - k 2 )k' b G b k b kik a N s + K d (l - i] E )n E (l - k 2 )k' b N b 

± 2Vd^d\/ ? ?s(l - 77b) (1 - ki)k a k e (1 ~ k 2 )k b G b kbkiN%, (30) 

from which it follows that 

rfi d E = N+-N E = 477^^^/77^(1 - VE )(1 - ki)k a k e (1 - k 2 )k / b G b k b kiJV|. (31) 

In the Letter, we have used ( E Ns = T)^d E . 

In order to evaluate our bound, developed below, on Eve's Holevo information, we need expressions for N El = 
(a Ei d El ), Ne 3 = (cl e o>e ); an d G BiE = (a E ). These are obtained as follows. For N El we have that 

N El = (1 - Ki)/«A(4o a s ) = (1 - ki)k A N s . (32) 

For A^b 3 we have that 

Ne 3 = (1 - ' c 2)Kb(«S 5 + "s 5 ) = (1 - K 2 )k' b G B K B KiK A Ns + (1 - K 2 )k' b N B . (33) 

For Cl P we have that 



C'liBa = V^l 1 - - «a)«B (4o a S 5 ) = ± \J K a( 1 - - K2)K' B G S K jB KiiV|. (34) 

III. ALICE AND EVE'S PER-MODE NOISE VARIANCES 

The per-mode conditional variances for Alice and Eve's ideal receivers when Bob's BSPK modulation is rad (+) or 
7r rad (— ) are the Bose-Einstein variances a A and a E , respectively. However, Alice and Eve's avalanche photodiodes 
have noise figure Fapd, their detection systems have electronics noise with per-mode variance a E , and Alice's OPA 
receiver has a per-mode conditional variance erf, — 0.2a A± arising from pump-power fluctuations. Thus their total 
per-mode conditional variances are 

<J A l 2 = Fapd {o\ ± +ct 2 p± ) + a 2 D and a^f = F APD a 2 A± +a 2 D . (35) 
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IV. PARAMETER VALUES 



Tabic U lists experimentally-determined parameter values for the experiment that yielded the data reported as blue 
circles and green triangles in the Letter's Fig. 2. 



Parameter 


Symbol 


Value 


Alice's fluorescence bandwidth 


W 


2THz 


Alice's signal transmissivity 


KA 


0.74 


Alice-to-Bob transmissivity 


Kl 


0.50 


Bob's pre-EDFA transmissivity 


kb 


0.43 


Bob's BPSK modulation rate 


R 


500 kbit/s 


Bob's BSPK bit duration 


T 


2 jj,s 


Bob's EDFA gain 


G B 


1.34 x 10 4 


Bob's EDFA per-mode ASE 


N b 


1.46 x 10 4 


Bob's post-EDFA transmissivity 


Kb 


0.39 


Bob-to- Alice transmissivity 




0.90 


Alice's return transmissivity 


k' a 


0.41 


Alice's idler transmissivity 


Kl 


0.39 


Alice's OPA gain -1 


Ga-1 


1.86 x 10~ 5 


Alice's detection efficiency 




0.45 


Alice's modulation-depth efficiency 




0.52 


Alice's number of mode pairs 


M 


4 x 10 6 


Eve's return transmissivity 


he 


0.013 


Eve's mixing transmissivity 


Ve 


0.99 


Eve's detection efficiency 


1 


0.5 


Eve's modulation-depth efficiency 


vS 


0.17 


APD noise figure 


Fapd 


3.0 


Electronics-noise variance 


oh 


6.0 x 10" 3 



TABLE I: Experimentally-determined parameter values for the experiment that yielded the BER data reported in the Letter's 
Fig. 2. 



V. BIT-ERROR RATE FOR GAUSSIAN-DISTRIBUTED OBSERVATIONS 



Suppose that we observe a continuous random variable x, whose statistics depend on the discrete random- variable 
message y that is equally likely to be +1 or — 1. In particular, let x be Gaussian distributed with mean value m + and 
variance when y = +1, and let x be Gaussian distributed with mean value m_ and variance <r_ when y = — 1, 
where ra + > m_ and > a 2 _. With the appropriate identifications for the conditional means and variances, this 
setup encompasses both Alice and Eve's receiver statistics. 

We will assume that the receiver employs a threshold-test decision rule, 

say y — +1 sent 

x ~ 7, (36) 

say y — — 1 sent 

where the threshold, 7, is chosen to equalize the false-alarm and miss probabilities, i.e., 

Pf = Pr( say y = +1 sent | y = — 1 sent ), (37) 

and 

Pm = Pr(say y = — 1 sent | y = +1 sent ). (38) 
The threshold that yields this equality is 

m+a- + m-a+ 

7 = ; . (39) 

0+ + <7_ 
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which leads to 



For the bit-error rate we thus get 



Pf = Pm = Q[^- . (40) 



BER = Pr(y = +1)P M + Pr(y = -l)P F = Q ( ™ + m ~ ) . (41) 

V cr+ + (J- J 

Moreover, because Pp = Pm the binary communication channel whose input is y and whose output is the result of 
the preceding threshold test is a binary symmetric channel. 



VI. ALICE AND EVE'S BIT ERROR RATES 



Applying the central limit theorem to the sum of M ^> 1 conditionally independent (given Bob's BPSK modulation), 
identically distributed mode-pair contributions that comprise Alice and Eve measurements leads to a model of the 
form considered in the preceding section with 

m± = Mm A ± MCaV n s(N s + T)/2 and a\ = Ma 2 ^ (42) 

for Alice when she uses her SPDC source, and 

m± = MffiE ± M( E N s /2 and a\ = Mcrff (43) 

for Eve, where the constants ttla and m E do not affect the BERs. The Letter's Eqs. (1) and (2) then follow immediately 
from the preceding BER theory for Gaussian-distributed observations. When Alice uses a source that produces M 
statistically independent, identically distributed, zero-mean, jointly-Gaussian signal-idler mode pairs whose phase- 
sensitive cross correlation is at the classical limit for the N$ source brightness, her BER follows from the Gaussian- 
observation theory but with 

m± = Mm A ± MCaNs/2 and a\ = Ma 2 ^. (44) 



VII. ALICE'S SHANNON INFORMATION AND EVE'S HOLEVO INFORMATION 



Alice's Shannon information (in bits) is given by 



(45) 



where b = 0, 1 and a = 0, 1 are the values of Bob's transmitted and Alice's decoded bits. Taking Bob's bit to be 
equally likely or 1, and using the fact that the Bob-to- Alice channel is binary symmetric — i.e., Alice's false-alarm 
and miss probabilities both equal the error probability from the Letter's Eq. (1) — we get 



Iab = 1 -BER A log 2 (BER A ) 

- (1 -BER A )log 2 (l-BER A ). 



(46) 
(47) 



Eve collects a set of M conditionally independent (given Bob's modulation), identically-distributed mode pairs 
from the Alice-to-Bob and Bob-to- Alice channels. Denoting the annihilation operators for a generic mode pair 
from this set by {cleu&e }■> wc nave that each mode pair, given Bob's modulation, is in a zero-mean, jointly- 
Gaussian state whose density operator P Ei e 2 IS completely characterized by the covariance matrix P^ lEo = 



([a 



i E l a Ei o>e 2 T I a El »i 2 a- E 



S k «s, T 1) satisfying 



Ei E2 



Nei 



Q± 
E\ E2 











Ne 2 










Nei+1 










Ne 2 



(48) 
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Here, N El = (o E a El ), N E . 2 = {&e^®e )> anc ^ CJj b = (ojg ®e )j where we have exploited the photon- number 
preserving nature of BSPK modulation and taken the cross-correlation to be real valued. Eve's Holevo information 
(in bits) is 

Xeb = S(p ElE2 ) - M[S(p EiE2 ) + S(p ElE2 )}/2 7 (49) 

where p ElE2 is Eve's unconditional joint state for all M mode pairs, and S(p) is the von Neumann entropy (in bits) 
of the density operator p. The conditional density operators p ElE2 are zero-mean, jointly-Gaussian states whose 
von Neumann entropies are easily evaluated from the symplectic-decomposition technique developed in Eve's 
unconditional density operator is not Gaussian, but it is zero- mean and its covariance matrix, Te 1 e 2 - i is block diagonal 
with each block equaling 

(r^ 2 +r Bl£2 )/2 = 

- N El 

% 

JV £l + l 

. Ne 2 + 1 

Thus T ElE2 is identical to the covariance matrix of 2M independent thermal states, half with average photon number 
N El and half with average photon number N E2 . So, because a thermal state of average photon number N has the 
maximum von Neumann entropy of all states with that average photon number, we get the upper bound 

Xeb < Xeb = M[g(N El ) + g(N E2 )} 

-M[S(p+ iE2 ) + S(p ElE2 )}/2 (52) 

on Eve's Holevo information, where g(N) = (N + 1) log 2 (iV + 1) — iVlog 2 (7V) is the von Neumann entropy (in bits) 
for the thermal state with average photon number N. 

VII. NOISE THRESHOLD FOR CLASSICALITY 

Alice's returned and retained light are in a classical state when Bob's ASE has per-mode average photon number 
Nb such that 

Evaluating the moments in this inequality yields 

kik' a k,2K b GbkbKik>aNs{Ns + 1) < kjNs{k' a k, 2 h' b Gbk-bKihaNs + k' a k 2 k' b N b ), (54) 
which simplifies to 

N B > N B hlcsh = Ki k a k b G b . (55) 



(50) 
(51) 



